Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File: _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier: 4+qNQ5yGqhueJ0J7yN40/2ipZJ87BQO8SOhT14tBg8I=
Subject key identifier: 8D:07:F5:CF:AC:1B:CE:27:66:35:49:44:F4:75:D2:41:40:48:21:91
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer: /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial: 019D2A72D73001F4AC097BBD1E64703766D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number: 06EC
Signing time: Thu 26 Mar 2026 14:01:02 +0000
Manifest this update: Thu 26 Mar 2026 14:01:02 +0000
Manifest next update: Fri 27 Mar 2026 14:01:02 +0000
Files and hashes: 1: 8mlX01dUhb6-6rm4Tg_A6iylZK8.roa (hash: aWWMzk3BVnWIBBzTyM865wpiSTi7X2ELFihppDyLczk=)
2: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: QLT7i0yMKA25Z8Gqoh6XfUzs+A3Y9hO3spjMAtolVUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:d7:30:01:f4:ac:09:7b:bd:1e:64:70:37:66:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Validity
Not Before: Mar 26 14:01:02 2026 GMT
Not After : Mar 27 14:01:02 2026 GMT
Subject: CN=8d07f5cfac1bce2766354944f475d24140482191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:aa:b5:a4:b8:cd:ef:09:86:fa:6d:14:62:
c2:6b:47:8c:c0:43:f9:63:1d:78:58:ac:a2:8f:be:
10:ed:82:c5:35:ea:b2:fc:a7:c2:f5:44:b0:a1:53:
6b:c0:b8:f3:1b:b1:64:8d:1b:f6:74:23:48:ff:22:
fc:ea:f2:a1:61:c4:9d:31:ea:67:85:e6:dd:38:fc:
90:df:24:6b:9b:0b:dc:68:12:cb:df:36:84:eb:f2:
15:63:7f:b5:6d:b5:f7:ab:e8:80:f5:c4:80:cd:30:
3d:6a:30:92:92:76:ea:eb:6f:b5:36:b8:9b:aa:d9:
00:86:92:1d:03:3d:6c:c8:de:c4:03:4d:75:7a:22:
ff:9e:39:fb:70:62:d3:18:3f:0b:f9:af:f4:32:5f:
30:a8:c9:75:eb:b2:a9:f0:f9:ad:92:55:1d:18:90:
0d:d4:0f:0a:1b:2d:0e:18:62:e6:5f:b6:e4:f1:45:
20:5f:cb:23:cc:f7:1a:4a:28:91:91:70:4e:46:98:
6b:d4:5d:17:17:7d:21:51:6d:36:cd:5d:36:ae:2e:
61:5b:9d:6b:40:50:f2:b4:79:c6:15:54:7c:bd:8f:
57:2b:5f:67:4b:0d:13:c5:2a:1e:e1:fb:0e:a7:94:
d2:cb:89:5a:c3:32:5a:b7:89:54:69:02:bf:58:06:
2e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:07:F5:CF:AC:1B:CE:27:66:35:49:44:F4:75:D2:41:40:48:21:91
X509v3 Authority Key Identifier:
keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cf:b5:83:b2:e5:7b:4e:9a:1a:8f:b2:4d:fd:55:26:55:fe:
43:ea:fa:a7:57:97:a6:f4:9f:7b:a4:12:85:a9:f4:f9:38:77:
71:56:44:73:c8:11:53:f1:cc:95:72:c0:43:fc:59:2e:5f:00:
7a:9d:16:e9:74:6f:2f:50:01:1a:9a:89:33:51:6a:d7:c9:ff:
4f:c3:ae:af:60:7a:37:6a:3f:38:54:99:63:d5:c6:2f:c7:dd:
39:11:f3:ae:b4:d9:43:ed:cc:e1:2f:42:8d:88:c6:4e:82:71:
36:fc:95:3d:2c:37:0a:27:f8:71:08:da:b3:88:e6:64:7a:6e:
4d:de:e1:e9:49:8e:c0:eb:ad:c0:02:70:74:c8:5d:7d:3a:4d:
da:66:79:3a:17:ad:9b:9d:20:db:88:e4:1c:65:99:f2:b2:ab:
bb:60:1e:7a:2e:32:df:43:c3:a8:3a:b6:fd:fd:04:36:85:15:
df:5a:55:5f:fd:f2:84:e3:ad:7c:46:41:fb:51:e9:f6:6d:73:
7c:e7:71:ae:57:8b:d3:8a:fc:f6:32:bc:81:8c:fd:89:4c:7f:
1b:75:d4:2a:e5:85:a8:3f:c3:32:de:6f:83:51:fb:63:f7:f1:
99:4b:bd:80:c0:0b:73:31:2b:cf:5b:b9:57:5d:99:f8:c2:8a:
10:2b:a8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:02 2026 by rpki-client